From 649f2cd8c12e8c3944c04c50d013447f7932b281 Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Tue, 16 Mar 2021 20:18:38 +0000
Subject: [PATCH] MDL-71128 mod_quiz: escape question idnumber on display.

---
 mod/quiz/locallib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/quiz/locallib.php b/mod/quiz/locallib.php
index 2327332b245..19d25e72cff 100644
--- a/mod/quiz/locallib.php
+++ b/mod/quiz/locallib.php
@@ -2137,7 +2137,7 @@ function quiz_question_tostring($question, $showicon = false, $showquestiontext
     if ($showidnumber && $question->idnumber !== null && $question->idnumber !== '') {
         $result .= ' ' . html_writer::span(
                 html_writer::span(get_string('idnumber', 'question'), 'accesshide') .
-                ' ' . $question->idnumber, 'badge badge-primary');
+                ' ' . s($question->idnumber), 'badge badge-primary');
     }
 
     // Question tags.